Us 



Receive a Plurality 
of Services at a 
Cable Head End 



Select a Level of 
Encryption At 

Which to Encrypt 
A First Set of 
Services 



\0% 



Store a First Set of 
Encryption Data 
Associated With 
Said First Data 
Stream 



■ni 



Store Encryption 
Keys as Part of 
the Encryption 
Data 



lit 



Determine the 
Number of .Services 
that can be Utilized at 
the Selected Level of 
Encryption 



Combine the 
Allowable 
Services Into a 
First DataStream 



IIH 



Encrypt the 
Services 



Transmit the First 
DataStream of 

Encrypted 
Services to the 
Customer 



•3)2. 



Determine a 
Change in 
Customer 
Program 
Requirements 



Fi 



select a second 
(different) Level of 

Encryption at 
Which to Encrypt a 
Second Set of 
Services 



•mo 



S^^Ra Plurality of 
Deo^Pron Algorithms 

in Memory at a 
Receiver (e.g., a set- 
top box) 



Reconfigure 
Encryption Processor 
to Reallocate Memory 
for Storing a Second 
Set of Encryption 
Data 



Store Decryption 
Keys as Part of 
the First Set of 
Decryption Data 



Store a Second 
Set of Encryption 
Data Associated 
With theSecond 
Data Stream 







Receive First 
DataStream 







Decrypt the 
DataStream 
Having the First 
Level of 
Encryption 



Store Encryption 
Keys as Part of 
the Second Set of 
Encryption Data 



S 
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Determine the 
Number of Services 
that can be Utilized at 
the New Level of 
Encryption 



Reconfigure Decryption 
Processor to Reallocate 

Memory for Storing a 
Second Set of Encryption 
Data 



Combine the 
Allowable Services 
Into a Second 
Datastream 



it z 



Store a Second Set of 
Decryption Data 
Associated with the 
Second Level of 
Encryption 



1st 



Utilize a Common Memory 
to Encrypt the First Data 
Stream at the First Level 
of Encryption and the 
Second Data Stream at 
the Second Level of 
Encryption 



Store Decryption 
Keys as Part of 
the Second Set of 
Decryption Data 



Receive Second 
DataStream 



Encrypt the 
Services 



Decrypt the 
Second Data 
Stream 



Transmit the Second 

DataStream of 
Encrypted Services to 
the Customer (e.g., to a 
set-top box) 



in 



in 



in 



Utilize a Common Memory 
to Bficrypt the First Data 
Stream at the First Level 
of Encryption and the 
Second Data Stream at 
the Second Level of 
Encryption 



m 




end 
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Key A 



Ciphenex 



ABC 

LLL 



3DES* 



Decrypt: P = DaE b Dc(C ) 



CipKertext 





DES* 1 




DES 




DES' 1 










Plaintext 



FIG. 7- 



Plaintext 



IV1 Key A 



DES 



IV2 Key B IV3 Key C IV4 

1 l __J_ 
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S 0 

S 1 
S2 
S3 
54 
S 5 
S6 

S8 

S9 

S 10 
S 11 

S 12 . 

S 13 

S 14 

S 15 



Single PES 

(16 services) 
Mode - 00 



CMV 



N-rv 



C-A-0 



N-A-0 



C-A-1 



N-A-1 



C-A-2 



N-A-2 



C-A-3 



N-A-3 



C-A-4 



N-A-4 



C-A-5 



N-A-5 



C-A-6 



N-A-6 



C-A-7 



N-A-7 



C-A-8 



N-A-8 



C-A-9 



N-A-9 



C-A-10 



N-A-10 



C-A-1 1 



N-A-11 



C-A-1 2 



N-A-12 



C-A-1 3 



N-A-13 



C-A-1 4 



N-A-14 



C-A-1 5 



N-A-1 5 

1 



SO 



S 1 



S3 



S 4 



S5 



S6 



DES-ABA 

(8 services) 
Mode - 01 



C-IV 



N-JV 



C-A-0 



N-A-0 



C-B-0 



N-B-0 



C-A-1 



N-A-1 



C-B-1 



N-B-1 



C-A-2 



N-A-2 



C-B-2 



N-B-2 



C-A-3 



N-A-3 



C-B-3 



N-B-3 



C-A-4 



N-A-4 



C-B-4 



N-B-4 



C-A-5 



N-A-5 



C-B-5 r 



N-B-5 



C-A-6 



N-A-6 



C-B-6 



N-B-6 



C-A-7 



N-A-7 



C-B-7 



N-B-7 



DES-ABC 
(4 Services) 
Mode - .10 




DES-ABC4 

(2 services - 4 IVs) 
Mode - 1 1 



SO c 




S:1 < 




C-IV0-1 



N-IV0-1 



C-IV1-1 



N-IV1-1 



C-IV2-1 



N-IV2-1 



C-IV3-1 



N-IV3-1 



Note- 



C: current 



N: next 



S: service 



x-x-xx: C/N-Key A/B/C-S 
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